CVE-2020-5766

7.5 highEPSS 7.2%

High (7.5) in srs simple hits counter project srs simple hits counter. EPSS 7.2% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-07-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

srs_simple_hits_counter_project:srs_simple_hits_counter

References

https://www.tenable.com/security/research/tra-2020-42
https://www.tenable.com/security/research/tra-2020-42

Check your stack JSON